Allow more flexibility in choosing which user groups must use MFA. In most setups, the "View Only" group may not want to use MFA, while the "Create/Edit" group should use MFA.
In other setups, some clients want to enforce MFA, while other clients do not want MFA.